Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File: oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier: 7DAZ0fiuWJXs+uESRHas0rppmFhqIYxPmuXuLGEKwzI=
Subject key identifier: 68:72:92:EB:70:04:87:39:9E:65:36:0A:5D:91:03:0B:B5:99:B9:22
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 01967BD72B6C79CABEE4F384AB908D8EC333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number: 1519
Signing time: Mon 28 Apr 2025 10:00:20 +0000
Manifest this update: Mon 28 Apr 2025 10:00:20 +0000
Manifest next update: Tue 29 Apr 2025 10:00:20 +0000
Files and hashes: 1: G7lrDh3ng-GW-cZtTDXP_4Uyeeo.roa (hash: 8XSDBL+Th3lG4+DHiWnSkzinVN6T0SXBXCnACUJdD3Y=)
2: GelQ-wpEtVaOdgayfz6S6TVZ0zQ.roa (hash: /97Q6YMRjpTXM1yiFxK+BKHm6SI3QfLA+ZDxZJQchX4=)
3: QkvmRVh9vbjetaUTQDKmilh3yjI.roa (hash: QQUY9iioyezmP/+TplWuIp1XntdAN5iG4imSGslQuKQ=)
4: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: wDeXQq5JhcK3yb57sICQyEjuxWL//mExRLFiDQMMxAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:2b:6c:79:ca:be:e4:f3:84:ab:90:8d:8e:c3:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Apr 28 10:00:20 2025 GMT
Not After : Apr 29 10:00:20 2025 GMT
Subject: CN=687292eb700487399e65360a5d91030bb599b922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:ee:b7:f1:70:6e:4a:ed:23:75:42:6d:a8:
9e:94:cc:e7:b4:ff:bb:cd:18:02:8d:bb:a9:08:1e:
d8:0c:ae:2b:a5:44:68:cf:ed:77:c7:23:14:2f:68:
fe:b6:8e:09:91:49:77:fe:be:d7:4c:da:66:a0:84:
de:8c:5a:24:af:4c:de:5b:fa:46:e7:f8:69:dc:5a:
67:3e:07:9a:ba:71:ef:84:a5:b0:70:db:f1:02:9b:
88:28:96:95:67:72:2f:45:04:ab:0b:47:43:84:96:
30:8d:06:f4:19:49:35:ab:26:ad:84:03:76:5a:8f:
8e:f7:42:aa:5e:ad:29:b9:b8:51:71:d1:dd:64:c5:
fa:a6:83:86:12:16:8f:83:59:2c:ca:36:ea:57:c6:
61:a3:cb:7d:ec:6e:32:06:ef:b3:f9:dc:90:30:dd:
da:29:3d:e1:0b:0c:e3:e7:85:d0:a0:ba:47:00:e7:
39:ef:41:df:1b:b5:06:40:38:9e:b8:5d:c3:41:9f:
d1:51:50:f4:c6:18:d9:7f:fd:a8:08:dc:ba:43:2a:
f5:a4:97:d3:1e:ca:c9:27:98:f3:14:d5:ef:2e:92:
14:35:39:37:e2:e3:bc:f9:e4:94:3d:59:14:d8:a4:
67:40:87:53:89:d6:c9:fe:ca:49:88:f8:7a:4b:cc:
51:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:72:92:EB:70:04:87:39:9E:65:36:0A:5D:91:03:0B:B5:99:B9:22
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d0:cc:cf:70:1f:1e:e9:de:13:e2:a6:1d:27:17:28:fd:76:
eb:78:b1:7e:4a:66:ec:78:48:9c:87:49:de:dd:f9:38:f8:f7:
ca:a7:d8:00:b5:20:38:ca:61:b0:a8:bc:ad:ed:be:26:8f:61:
63:8e:37:f0:54:49:c4:92:3c:6e:4d:5a:6d:3a:99:b9:88:8d:
c9:ec:0e:79:37:d0:2a:1e:11:d1:50:13:bc:11:2b:10:3e:98:
65:70:72:5e:15:2c:89:0b:63:c5:a2:c9:63:02:ff:83:25:36:
c8:aa:04:39:f8:13:f3:2f:3e:7c:ba:82:67:e8:81:c4:a8:10:
12:64:38:95:e7:c4:ff:c4:27:86:9d:38:67:27:01:5c:f3:26:
40:8b:45:39:7f:26:86:f5:29:26:68:1c:af:05:16:db:e6:28:
7d:34:4b:5c:55:b8:60:03:33:5d:f4:d1:eb:80:9c:1e:05:d1:
aa:e0:7c:22:b4:7e:65:43:5e:19:3a:63:42:d2:14:b3:4f:10:
7e:5c:5a:32:9a:32:b9:7c:d2:fb:f0:f5:6f:05:7e:29:99:16:
82:30:93:e1:f0:a1:83:30:00:bc:38:ec:4c:ff:77:24:f7:15:
b6:f4:58:9c:29:80:5b:b5:0e:64:62:f1:1b:4e:ea:58:5b:f2:
b7:90:2e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:21:16 2025 by rpki-client